jschoubben 160b5ad65a postgres: the store's query runs as a read-only login, never as the admin (hq #193) ...

The verb wrapped the caller's text in BEGIN READ ONLY ... ROLLBACK as the superuser, so
'COMMIT; ...' left the transaction and, proven on a throwaway server, COPY TO PROGRAM ran a
shell command on the database host. The statement now runs as mesh_store_reader:
pg_read_all_data, no other grant, read-only transactions by role and session, its password
an own-secret the mesh mints. Without that password the call is refused. -q drops the
command tags that came back as rows keyed by BEGIN.

2026-10-02 00:09:09 +02:00

..

provisioner

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

test

postgres: the store's query runs as a read-only login, never as the admin (hq #193)

2026-10-02 00:09:09 +02:00

tools

postgres: the store's query runs as a read-only login, never as the admin (hq #193)

2026-10-02 00:09:09 +02:00

client.ts

postgres: the store's query runs as a read-only login, never as the admin (hq #193)

2026-10-02 00:09:09 +02:00

Dockerfile

Ten migration-critical modules become mesh-buildable (issue 060)

2026-09-18 02:02:21 +02:00

index.ts

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

module.json

postgres: the store's query runs as a read-only login, never as the admin (hq #193)

2026-10-02 00:09:09 +02:00

package.json

postgres: the store's query runs as a read-only login, never as the admin (hq #193)

2026-10-02 00:09:09 +02:00

tsconfig.json

redis, postgres: full nox provider modules — client, tools, provisioner, events

2026-09-04 02:39:03 +02:00